- Home
- Curam Software
- CompTIA Cybersecurity Analyst (CySA+) Certification Exam
- CuramSoftware.CS0-003.v2024-05-07.q144
- Question 70
Valid CS0-003 Dumps shared by ExamDiscuss.com for Helping Passing CS0-003 Exam! ExamDiscuss.com now offer the newest CS0-003 exam dumps, the ExamDiscuss.com CS0-003 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com CS0-003 dumps with Test Engine here:
Access CS0-003 Dumps Premium Version
(622 Q&As Dumps, 35%OFF Special Discount Code: freecram)
<< Prev Question Next Question >>
Question 70/144
You are a cybersecurity analyst tasked with interpreting scan data from Company As servers You must verify the requirements are being met for all of the servers and recommend changes if you find they are not The company's hardening guidelines indicate the following
* TLS 1 2 is the only version of TLS
running.
* Apache 2.4.18 or greater should be used.
* Only default ports should be used.
INSTRUCTIONS
using the supplied dat
a. record the status of compliance With the company's guidelines for each server.
The question contains two parts: make sure you complete Part 1 and Part 2. Make recommendations for Issues based ONLY on the hardening guidelines provided.
Part 1:
AppServ2:
AppServ3:
AppServ4:
Part 2:
* TLS 1 2 is the only version of TLS
running.
* Apache 2.4.18 or greater should be used.
* Only default ports should be used.
INSTRUCTIONS
using the supplied dat
a. record the status of compliance With the company's guidelines for each server.
The question contains two parts: make sure you complete Part 1 and Part 2. Make recommendations for Issues based ONLY on the hardening guidelines provided.
Part 1:
AppServ2:
AppServ3:
AppServ4:
Part 2:
Correct Answer:
check the explanation part below for the solution
Explanation:
Part 1:
Part 2:
Based on the compliance report, I recommend the following changes for each server:
AppServ1: No changes are needed for this server.
AppServ2: Disable or upgrade TLS 1.0 and TLS 1.1 to TLS 1.2 on this server to ensure secure encryption and communication between clients and the server. Update Apache from version 2.4.17 to version 2.4.18 or greater on this server to fix any potential vulnerabilities or bugs.
AppServ3: Downgrade Apache from version 2.4.19 to version 2.4.18 or lower on this server to ensure compatibility and stability with the company's applications and policies. Change the port number from 8080 to either port 80 (for HTTP) or port 443 (for HTTPS) on this server to follow the default port convention and avoid any confusion or conflicts with other services.
AppServ4: Update Apache from version 2.4.16 to version 2.4.18 or greater on this server to fix any potential vulnerabilities or bugs. Change the port number from 8443 to either port 80 (for HTTP) or port 443 (for HTTPS) on this server to follow the default port convention and avoid any confusion or conflicts with other services.
Explanation:
Part 1:
Part 2:
Based on the compliance report, I recommend the following changes for each server:
AppServ1: No changes are needed for this server.
AppServ2: Disable or upgrade TLS 1.0 and TLS 1.1 to TLS 1.2 on this server to ensure secure encryption and communication between clients and the server. Update Apache from version 2.4.17 to version 2.4.18 or greater on this server to fix any potential vulnerabilities or bugs.
AppServ3: Downgrade Apache from version 2.4.19 to version 2.4.18 or lower on this server to ensure compatibility and stability with the company's applications and policies. Change the port number from 8080 to either port 80 (for HTTP) or port 443 (for HTTPS) on this server to follow the default port convention and avoid any confusion or conflicts with other services.
AppServ4: Update Apache from version 2.4.16 to version 2.4.18 or greater on this server to fix any potential vulnerabilities or bugs. Change the port number from 8443 to either port 80 (for HTTP) or port 443 (for HTTPS) on this server to follow the default port convention and avoid any confusion or conflicts with other services.
- Question List (144q)
- Question 1: Given the following CVSS string- CVSS:3.0/AV:N/AC:L/PR:N/UI:...
- Question 2: The security operations team is required to consolidate seve...
- Question 3: Which of the following is described as a method of enforcing...
- Question 4: A penetration tester submitted data to a form in a web appli...
- Question 5: A security analyst performs a vulnerability scan. Based on t...
- Question 6: After conducting a cybersecurity risk assessment for a new s...
- Question 7: During a security test, a security analyst found a critical ...
- Question 8: A SOC analyst recommends adding a layer of defense for all e...
- Question 9: Which of the following is the best metric for an organizatio...
- Question 10: A security administrator needs to import Pll data records fr...
- Question 11: Which of the following is a reason why proper handling and r...
- Question 12: An organization's threat intelligence team notes a recent tr...
- Question 13: A network analyst notices a long spike in traffic on port 14...
- Question 14: Using open-source intelligence gathered from technical forum...
- Question 15: A managed security service provider is having difficulty ret...
- Question 16: An attacker recently gained unauthorized access to a financi...
- Question 17: An employee is no longer able to log in to an account after ...
- Question 18: A security analyst performs various types of vulnerability s...
- Question 19: After identifying a threat, a company has decided to impleme...
- Question 20: A security analyst noticed the following entry on a web serv...
- Question 21: New employees in an organization have been consistently plug...
- Question 22: Which of the following is the most important factor to ensur...
- Question 23: Which of the following would help an analyst to quickly find...
- Question 24: A security analyst reviews the latest vulnerability scans an...
- Question 25: A security analyst must preserve a system hard drive that wa...
- Question 26: Which of the following best describes the process of requiri...
- Question 27: A vulnerability analyst received a list of system vulnerabil...
- Question 28: A security analyst is trying to identify anomalies on the ne...
- Question 29: A security analyst is reviewing a packet capture in Wireshar...
- Question 30: An incident response analyst is taking over an investigation...
- Question 31: Which of the following is a commonly used four-component fra...
- Question 32: An analyst has received an IPS event notification from the S...
- Question 33: Each time a vulnerability assessment team shares the regular...
- Question 34: The vulnerability analyst reviews threat intelligence regard...
- Question 35: There are several reports of sensitive information being dis...
- Question 36: During security scanning, a security analyst regularly finds...
- Question 37: A security program was able to achieve a 30% improvement in ...
- Question 38: An incident response team finished responding to a significa...
- Question 39: The developers recently deployed new code to three web serve...
- Question 40: Which of the following best describes the threat concept in ...
- Question 41: A company receives a penetration test report summary from a ...
- Question 42: Which of the following is a nation-state actor least likely ...
- Question 43: During a recent site survey. an analyst discovered a rogue w...
- Question 44: After a security assessment was done by a third-party consul...
- Question 45: A security analyst is trying to identify possible network ad...
- Question 46: A Chief Information Security Officer wants to map all the at...
- Question 47: A security analyst received an alert regarding multiple succ...
- Question 48: The security analyst received the monthly vulnerability repo...
- Question 49: A Chief Information Security Officer (CISO) is concerned tha...
- Question 50: During normal security monitoring activities, the following ...
- Question 51: Which of the following does "federation" most likely refer t...
- Question 52: The Chief Information Security Officer for an organization r...
- Question 53: Which of the following threat actors is most likely to targe...
- Question 54: Which of the following is a benefit of the Diamond Model of ...
- Question 55: An organization conducted a web application vulnerability as...
- Question 56: During an incident, some loCs of possible ransomware contami...
- Question 57: Which of the following risk management principles is accompl...
- Question 58: A cybersecurity analyst is tasked with scanning a web applic...
- Question 59: An older CVE with a vulnerability score of 7.1 was elevated ...
- Question 60: An analyst is remediating items associated with a recent inc...
- Question 61: An analyst is reviewing a vulnerability report for a server ...
- Question 62: A zero-day command injection vulnerability was published. A ...
- Question 63: A security analyst needs to secure digital evidence related ...
- Question 64: A threat hunter seeks to identify new persistence mechanisms...
- Question 65: A security analyst reviews the following results of a Nikto ...
- Question 66: A disgruntled open-source developer has decided to sabotage ...
- Question 67: A security analyst discovers an ongoing ransomware attack wh...
- Question 68: Which of the following statements best describes the MITRE A...
- Question 69: A SIEM alert is triggered based on execution of a suspicious...
- Question 70: You are a cybersecurity analyst tasked with interpreting sca...
- Question 71: A security analyst discovers an LFI vulnerability that can b...
- Question 72: A cryptocurrency service company is primarily concerned with...
- Question 73: A security analyst identified the following suspicious entry...
- Question 74: Which of the following will most likely ensure that mission-...
- Question 75: An analyst needs to provide recommendations based on a recen...
- Question 76: Which of the following would a security analyst most likely ...
- Question 77: An incident responder was able to recover a binary file thro...
- Question 78: A manufacturer has hired a third-party consultant to assess ...
- Question 79: A company is implementing a vulnerability management program...
- Question 80: A user downloads software that contains malware onto a compu...
- Question 81: A cybersecurity analyst is recording the following details *...
- Question 82: Which of the following would likely be used to update a dash...
- Question 83: Which of the following techniques can help a SOC team to red...
- Question 84: Approximately 100 employees at your company have received a ...
- Question 85: A security analyst needs to provide evidence of regular vuln...
- Question 86: While reviewing web server logs, an analyst notices several ...
- Question 87: Which of the following security operations tasks are ideal f...
- Question 88: A recent vulnerability scan resulted in an abnormally large ...
- Question 89: A security team identified several rogue Wi-Fi access points...
- Question 90: Which of the following can be used to learn more about TTPs ...
- Question 91: An analyst is designing a message system for a bank. The ana...
- Question 92: When investigating a potentially compromised host, an analys...
- Question 93: Which Of the following techniques would be best to provide t...
- Question 94: While reviewing web server logs, a security analyst found th...
- Question 95: A cybersecurity team lead is developing metrics to present i...
- Question 96: Two employees in the finance department installed a freeware...
- Question 97: Which of the following phases of the Cyber Kill Chain involv...
- Question 98: A cybersecurity analyst notices unusual network scanning act...
- Question 99: A security analyst detected the following suspicious activit...
- Question 100: An analyst notices there is an internal device sending HTTPS...
- Question 101: A laptop that is company owned and managed is suspected to h...
- Question 102: Security analysts review logs on multiple servers on a daily...
- Question 103: An organization recently changed its BC and DR plans. Which ...
- Question 104: An incident response analyst is investigating the root cause...
- Question 105: Which of the following stakeholders are most likely to recei...
- Question 106: Which of following would best mitigate the effects of a new ...
- Question 107: Which of the following concepts is using an API to insert bu...
- Question 108: Joe, a leading sales person at an organization, has announce...
- Question 109: During an incident, a security analyst discovers a large amo...
- Question 110: An analyst is examining events in multiple systems but is ha...
- Question 111: A security analyst detects an email server that had been com...
- Question 112: A company is in the process of implementing a vulnerability ...
- Question 113: AXSS vulnerability was reported on one of the non-sensitive/...
- Question 114: A Chief Information Security Officer has outlined several re...
- Question 115: An incident response team is working with law enforcement to...
- Question 116: A company has the following security requirements: . No publ...
- Question 117: A security analyst is tasked with prioritizing vulnerabiliti...
- Question 118: An organization has experienced a breach of customer transac...
- Question 119: A security analyst reviews the following extract of a vulner...
- Question 120: A security team conducts a lessons-learned meeting after str...
- Question 121: A company that has a geographically diverse workforce and dy...
- Question 122: Which of the following best describes the document that defi...
- Question 123: Which of the following would eliminate the need for differen...
- Question 124: An organization would like to ensure its cloud infrastructur...
- Question 125: A vulnerability management team is unable to patch all vulne...
- Question 126: A security analyst is writing a shell script to identify IP ...
- Question 127: A company is in the process of implementing a vulnerability ...
- Question 128: Which of the following describes the best reason for conduct...
- Question 129: During an extended holiday break, a company suffered a secur...
- Question 130: Which of the following is an important aspect that should be...
- Question 131: Which of the following describes a contract that is used to ...
- Question 132: While configuring a SIEM for an organization, a security ana...
- Question 133: Which of the following best describes the key elements of a ...
- Question 134: Several vulnerability scan reports have indicated runtime er...
- Question 135: An analyst discovers unusual outbound connections to an IP t...
- Question 136: During an internal code review, software called "ACE" was di...
- Question 137: When undertaking a cloud migration of multiple SaaS applicat...
- Question 138: A company brings in a consultant to make improvements to its...
- Question 139: Which of the following is the first step that should be perf...
- Question 140: An organization conducted a web application vulnerability as...
- Question 141: Which of the following is often used to keep the number of a...
- Question 142: An incident response team found IoCs in a critical server. T...
- Question 143: Which of the following describes how a CSIRT lead determines...
- Question 144: A company recently experienced a security incident. The secu...
[×]
Download PDF File
Enter your email address to download CuramSoftware.CS0-003.v2024-05-07.q144.pdf